Attackers already understand your software supply chain better than you do 13 Sep 2026 By Ilkka Turunen, Sonatype